Information security management system is an internal control process and manages risk.

Question

Quizplus · Accepted Answer

An Information Security Management System (ISMS) is a set of policies, procedures, and controls that manage the risks associated with sensitive information assets. It is an internal control process that aims to protect the confidentiality, integrity, and availability of information assets by identifying, assessing, and mitigating security risks. Therefore, the statement is true.

Information Security Management System Is an Internal Control Process and Manages